emo/xbps
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

portableproplib/prop_object: fix an insecure temporary file (CID #62739).

Browse Source
This commit is contained in:
Juan RP 2015-07-26 09:11:20 +02:00
parent 36026451ce
commit 0d3c07cdee
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/portableproplib/prop_object.c
View File

@ -849,8 +849,12 @@ _prop_object_externalize_write_file(const char *fname, const char *xml,
strcat(tname, PLISTTMP); strcat(tname, PLISTTMP);
#undef PLISTTMP #undef PLISTTMP
if ((fd = mkstemp(tname)) == -1) myumask = umask(S_IXUSR|S_IRWXG|S_IRWXO);
if ((fd = mkstemp(tname)) == -1) {
umask(myymask);
return (false); return (false);
}
umask(myymask);
if (do_compress) { if (do_compress) {
if ((gzf = gzdopen(fd, "a")) == NULL) if ((gzf = gzdopen(fd, "a")) == NULL)